Worklenz

4 CVEs in 1 Worklenz product, including Worklenz. Newest: CVE-2026-85389 (2026-09-03). Severity, EPSS and public exploits for each.

Worklenz products with known CVEs

ProductCVEs
Worklenz4
Worklenz CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-85389Medium6.52026-09-03Worklenz before 3.0.0 fails to verify task ownership by organization when resolving task-scoped API endpoints, allowing authenticated users to access another t…
CVE-2026-85388High8.12026-09-03Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitra…
CVE-2026-25947High8.82026-02-10Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affec…
CVE-2025-70368Medium5.42026-01-26Worklenz version 2.1.5 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Project Updates feature. An attacker can submit a malicious payload in…